Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/39F48CC2191B301BAD6AC56A53795E35E01621BD.cer
File:                     39F48CC2191B301BAD6AC56A53795E35E01621BD.cer (raw, json)
Hash identifier:          o51E/Jt+bbfaLvLUP+8yEY7BYGhqGSZvcO9h051qkT4=
Subject key identifier:   39:F4:8C:C2:19:1B:30:1B:AD:6A:C5:6A:53:79:5E:35:E0:16:21:BD
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0DA5069A8DD55776B4AFD294CF58E1FFA596FDCF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/48UQk1DpVCnVRAHM9zjkJDZJkJhmabUUUwSBQ41fo2fa/0/39F48CC2191B301BAD6AC56A53795E35E01621BD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/48UQk1DpVCnVRAHM9zjkJDZJkJhmabUUUwSBQ41fo2fa/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 19 Mar 2026 15:19:23 +0000
Certificate not after:    Thu 18 Mar 2027 15:24:23 +0000
Subordinate resources:    AS: 53100
                          IP: 187.103.128.0/20
                          IP: 2804:c0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 00:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:a5:06:9a:8d:d5:57:76:b4:af:d2:94:cf:58:e1:ff:a5:96:fd:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 19 15:19:23 2026 GMT
            Not After : Mar 18 15:24:23 2027 GMT
        Subject: CN=39F48CC2191B301BAD6AC56A53795E35E01621BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:65:d9:ac:9d:21:4b:e5:80:6b:8e:73:94:53:
                    0f:08:ce:80:44:73:66:ba:69:6f:56:34:e4:f6:00:
                    f8:61:ca:ba:74:15:cf:79:87:2f:db:62:0a:8c:b9:
                    5b:5d:85:27:f7:06:46:81:fa:6e:48:6f:17:e8:79:
                    63:31:38:ed:d8:9a:81:91:29:17:80:36:fb:5e:28:
                    88:0d:e4:d5:cc:06:41:87:66:98:82:72:d5:3b:f2:
                    b1:f5:6b:70:40:14:3f:59:02:e0:06:27:a0:05:5c:
                    ec:1a:d2:0e:35:f3:47:a0:70:7f:da:dc:b0:d8:0c:
                    65:f6:ae:d9:68:cd:8a:28:9a:05:78:b7:fd:cf:26:
                    ac:50:6e:e3:1d:3a:e5:cb:98:3a:51:3f:46:49:53:
                    4c:e2:89:5d:88:03:e1:44:e0:66:40:33:92:52:a3:
                    2f:9e:dd:50:71:78:ad:35:09:90:ec:bd:5b:5d:85:
                    66:bd:cb:d6:a0:ef:cd:92:00:f4:d1:7c:79:6e:f8:
                    7e:eb:3d:ca:46:77:e0:09:d7:8f:9a:f1:f4:a7:ed:
                    74:8c:86:1b:29:66:1d:bd:d2:c9:b6:fe:31:b7:0e:
                    0f:7f:ad:6b:72:ce:3a:3c:db:40:2b:88:e0:07:32:
                    89:51:16:ef:b2:8e:ae:e8:10:57:34:42:a0:7d:4a:
                    49:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                39:F4:8C:C2:19:1B:30:1B:AD:6A:C5:6A:53:79:5E:35:E0:16:21:BD
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/48UQk1DpVCnVRAHM9zjkJDZJkJhmabUUUwSBQ41fo2fa/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/48UQk1DpVCnVRAHM9zjkJDZJkJhmabUUUwSBQ41fo2fa/0/39F48CC2191B301BAD6AC56A53795E35E01621BD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.103.128.0/20
                IPv6:
                  2804:c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53100

    Signature Algorithm: sha256WithRSAEncryption
         9a:89:1a:6c:94:58:dc:69:d7:0e:e4:36:7e:75:f1:d9:29:ec:
         a7:c3:f6:b9:f5:72:15:43:5f:be:42:3a:47:6b:74:79:49:28:
         cd:13:d2:95:79:c6:84:6e:d8:6f:ad:c0:6e:74:1d:d3:82:ba:
         11:ee:88:5b:91:8d:93:a9:20:62:d9:f7:fb:65:d6:00:b2:42:
         13:d1:a6:7e:20:6e:dc:ec:f9:70:72:7b:db:7c:1a:62:65:0e:
         0f:17:32:52:06:43:b6:5d:19:b4:ca:46:af:3d:df:d5:20:0e:
         c8:ad:e1:e0:53:ca:0d:0e:4b:11:07:ea:69:70:39:5e:85:5b:
         f0:03:09:14:92:f8:a1:c9:07:29:ae:d2:b2:98:cf:0b:04:65:
         dc:06:02:8b:d7:7d:8e:9f:e6:70:6c:8b:a8:16:21:51:53:d5:
         28:b4:23:ff:6a:77:fc:4f:ea:08:c9:c8:d7:0c:72:5d:22:6f:
         ef:74:1e:95:47:1a:68:a8:be:c2:f4:68:36:a7:fb:f0:9a:38:
         e3:be:07:34:ae:46:26:c4:a9:8a:f3:d2:50:8b:8a:35:c2:c1:
         32:f7:bd:ec:ca:bd:f9:ce:8b:2d:1d:e5:ae:fd:1f:ed:5c:d2:
         04:2f:f7:8d:eb:39:fc:0b:13:dc:32:fb:f5:0d:70:50:2e:28:
         2f:73:d8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:58:58 2026 by rpki-client